Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa
File: Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa (raw, json)
Hash identifier: +iXd1M4+bcqd1pD4b5qHzxAyt89KMtB2DGWb5orKRYY=
Subject key identifier: 2D:DD:E3:CE:BA:D7:5F:35:97:56:43:14:80:8E:94:0F:D2:16:60:9C
Certificate issuer: /CN=355608d078d6f31cf79be78736bf884606a17da4
Certificate serial: 01942745D7D95477620635C912231BFFEAAF
Authority key identifier: 35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa
Signing time: Thu 02 Jan 2025 13:47:56 +0000
ROA not before: Thu 02 Jan 2025 13:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48426
IP address blocks: 46.183.49.0/24 maxlen: 24
46.183.50.0/23 maxlen: 23
46.183.52.0/24 maxlen: 24
91.209.154.0/24 maxlen: 24
2a00:4040::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:d7:d9:54:77:62:06:35:c9:12:23:1b:ff:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=355608d078d6f31cf79be78736bf884606a17da4
Validity
Not Before: Jan 2 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ddde3cebad75f3597564314808e940fd216609c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f6:64:96:72:e7:c3:86:5f:b7:d0:1e:91:0f:
0d:3a:ad:b5:b4:e0:df:36:fb:8e:d5:9f:0d:bc:66:
30:73:27:b1:f6:f4:20:70:e0:e5:82:96:d6:61:80:
75:d1:6a:32:a5:ad:8d:cb:74:dc:fd:25:36:63:07:
f0:fd:8c:b1:63:78:14:1a:cf:bf:f6:ea:09:48:2f:
58:5c:2b:d4:0e:36:68:b6:1e:0a:37:66:52:e4:81:
0f:5f:d0:d9:b0:f8:3b:f9:ba:ca:85:c6:3c:76:93:
9a:6a:d3:4f:51:6e:15:3d:3e:54:71:c7:b8:47:19:
06:69:52:c1:ee:8c:44:d2:72:81:57:d9:c4:2c:55:
3b:a3:5b:9c:18:88:fb:a5:7b:dc:a7:6a:dd:87:c3:
86:1e:37:1f:ac:18:96:ae:ce:b5:b5:0f:c6:d4:41:
f6:f8:35:8a:40:26:31:32:48:0f:e7:ad:e5:f7:33:
a4:7f:55:76:5a:8b:be:42:be:28:59:f3:ed:f3:16:
cd:29:16:7b:e6:0d:ca:37:89:ce:a9:59:1e:18:59:
64:19:1f:80:a3:cc:8c:83:ea:0d:cc:66:bf:2f:d8:
fa:c6:62:c3:65:26:8b:4b:5a:3a:e2:3a:e0:ff:e2:
41:90:0a:d5:6b:e4:d8:6a:39:e9:07:0e:58:25:23:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DD:E3:CE:BA:D7:5F:35:97:56:43:14:80:8E:94:0F:D2:16:60:9C
X509v3 Authority Key Identifier:
keyid:35:56:08:D0:78:D6:F3:1C:F7:9B:E7:87:36:BF:88:46:06:A1:7D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVYI0HjW8xz3m-eHNr-IRgahfaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/Ld3jzrrXXzWXVkMUgI6UD9IWYJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b84195-cd46-49cb-85f8-6eb43b556e13/1/NVYI0HjW8xz3m-eHNr-IRgahfaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.49.0-46.183.52.255
91.209.154.0/24
IPv6:
2a00:4040::/48
Signature Algorithm: sha256WithRSAEncryption
00:65:06:9f:e3:90:35:39:af:0c:11:af:5a:a2:f9:b1:a0:64:
e4:45:2f:c9:3c:6f:d7:57:78:ce:e9:6d:c4:9e:e3:93:8e:b4:
2f:df:42:10:e2:3c:66:30:98:bb:bc:1e:23:1f:7b:33:16:55:
9e:1f:f2:39:f4:d5:2e:86:9b:f7:07:e8:97:46:1d:53:e1:26:
6b:8d:a5:0e:3b:1c:15:f1:be:97:21:f7:d1:f9:e4:26:1d:af:
b9:82:97:dd:56:89:42:34:9d:2f:eb:5e:d0:45:ed:9f:b2:c6:
29:be:5d:39:8f:af:20:75:13:5d:ea:c9:b3:8f:9d:59:9a:1b:
ea:69:55:83:f4:e2:97:59:ef:d3:eb:15:ab:00:45:5e:fc:74:
2d:cb:5c:26:fc:b4:0a:ac:80:0a:a1:8a:e0:de:68:40:eb:bd:
fe:e6:b8:6f:c7:71:7a:80:e7:13:1a:a8:86:15:57:50:c4:58:
26:01:e2:3f:11:fc:30:88:08:30:13:ca:d3:a1:61:37:f7:01:
89:ad:45:0b:0f:eb:ff:b3:69:d4:05:99:b2:89:b3:ec:69:a8:
53:10:17:18:a7:ed:f3:90:2d:d8:4c:89:78:94:81:bb:0b:99:
04:80:cf:f8:dc:99:4d:18:7d:81:39:6c:76:ce:c8:9b:e7:b3:
17:ad:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:02:00 2025 by rpki-client